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Biometrics: 
Ycu 

are your password 

Dan Strassberg, SemoR Teowkal EotroR 

For verifying your identity, your pfiysior) attributes are better in 
many ways than a passwonj. But which attributes to use and 
what mass-market products should be the first to use this 
technology are provoking a spirited debate in the biiMnetrics 
community. 



Eiometrics is a hot tofdc. The idea of using your physical attributes— fin- 
gerprints, a votceprint, or any of several other characteristics — to prove 
your identity has a lot of appeal. Passwords and personal-identification 
numbers (PlNs) are fraught with problems. Biometrics offers solutions. Appli- 
cations that are preparing to accept biometric data include computer net- 
works, ATMs, cars, cellular phones, and dozens of other types of 
embedded systems. 

After years of producing relatively high-priced tech' 
nology for specialized—often government-fund- 
ed—niches, the biometrics industry is expanding. 
Several companies have announced dramatically 
less expensive sensors that enable biometrics to 
target high-volume applications. Many of these 
devices are at least at the preproduction stage. Still, 
like any emerging technology, especially one based 
on measurements as inexact as those of human 
attributes, biometrics must go a long way before it 
fulfills its proponents' optimistic forecasts. 

In the computer industry, the goal of biometrics 
advocates is ubiquitous deployment. Some proponents 
talk of attaching not just one, but several biometiic sen- 
sors to every PC. Because of the prospect of selling hun- 
dreds of millions of sensors and software packages, some 
biometrics advocates envision tibe liiEelUiood of accu- 
mulating enormous wealth. 

For biometrics, widespread acceptance means use in 
areas that daily affect tlie lives of millions of people. By 
replacing PlNs, biometric techniques can potentially pre- 




Optical fingerprint scanners no longer 
have to cost more than $1000. Biometric 
Access Corp's SecureTouch lists for $199. 
It connects to a PC's parallel port and pro- 
vides a pass-through facility for other 
parallel-port-connected peripherals. 
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vent unauthorized access to or fraudu- 
lent use of ATMs, cellular phones, smart 
cards, desktop PCs, workstations, and 
compiiternetworks. For financial trans- 
actions conducted via telephone and 
wire, biometrics could replace PlNs and 



passwords. In automobiles, biometric 
techniques can replace keys or keyless- 
entry devices. In buildings and work 
areas, biometric techniques may 
replace keys, badges, and readers. 
By replacing PlNs for transfers of 



funds to the cards, biometrics could 
enhance the security of aedit/debit- 
card (plastic-money) systenM and pre- 
paid telephone calling cards. Biometric 
techniques might also provide security 
not previously envisioned for "cash" 



Fingerprint sensing— pointing the way to low-cost biometrics 



Of all the areas of biometrics, fingerprint sensing is the one that 
currently appears to have captured the imagination of the largest 
number of companies. Four IC manufacturers embody unusual 
fingerprint-sensing technologies in new chips. Dozens of compa- 
nies that aren't in the IC bi.isine,<;s 
have announced fingerprint-sens- 
ing units. Some of these units use 
the new IC technologies; others 
use optical approaches. 

Although optical fingerprint 
sensing is not new, some of the 
new optics-b^ised sensing units 
ofJer much lower prices and small- 
er sizes than did their predeces- 
sors. And, although they attribute 
these properties to advances in 
optical technology, the manufac- 
turers don't reveal very much 
about the advances. Neverthe- 
less, the new units' size and cost 
suggest that optical fingerprint 
sensors may be able to compete 
with tC sensors. Optical-sensor 
manufacturers also like to point 
out that none of the IC fingerprint 
sensors is yet shipping in quanti- 
ty, whereas optics-based sensors 
have been shipping for years. 

Two of the IC approaches — one from SGS-Thomson, the other 
from Veridicom, a spin-off of Lucent Technologies' Bell Laborato- 
ries (www.bell-labs.com)— are dc-eapacitive sensors. Harris Semi- 
conductor Corp's FingerLoc is an ac-capadbve sensor. The fourth 
approach, Thomson-CSF's FingerChipy uses thermal sensing. 

Like most optical fingerprint sensors, each IC sensor produces 
a high-resolution (several-hundred-pixels by several-hundred-pix- 
els by 8 or 1 6 bits) image of a finger tip. These images are com- 
parable with those obtained by pressing inked finger tips onto 
absorbent paper. In fact, automatic fingerprint-identification sys- 
tems can process images obtained from biometric sensors just as 
easily as they can process images obtained from inked fingers. 

With the sensors, however, there is no ink and no mess. In 
uncompressed form, llie images occupy several hundred kilo- 
bytes. Many fingerprint-based authentication systems store the 
images in a compressed form, in vs'hich they occupy approxi- 
mately 1 kbytes. Although the image compression uses lossy 
algorithms, the algorithms are tuned for fingerprint recognition. 
Most fingerprint experts say thai they can't detect differences 
between the original and the decompressed images. 

An even more compact way to store the important feauires of 
fingerprints is to extract minutiae (Figure A). Minutiae are the 
points at which fingerprint patterns branch a' i er '. Some sup- 
pliers of software that extracts minutiae say that their software can 




The most compact way to store key ekments of a fin- 
gerprint is as minutiae, the points at which the finger- 
print patterns branch or end. Aithough a gray-scale fin- 
gerprint image usually occupies 100 ktwt«s or more, a 
minutiae file can oceu^ as llttU as 300 bj^m (cour^y 
Verkllcom). 



represent any fingerprint in 300 bytes or less. Others say that a 
minutiae file can occupy as much as 1200 bytes. Eitiier way, minu- 
tiae files significantiy compress the original image. 

You cannot reconstruct the original image from the minutiae, 
_ however. Still, law-enforcement 

personnel can perform automat- 
ed searches through minutiae 
databases to find prints that are 
likely to match a print recovered 
from a crime scene. When it iden- 
tifies the database records that are 
likely to contain a matching print, 
the computer decompresses 
those images. (Remember, the 
compressed images reside in files 
of roughly 10 kbytes; the much 
smaller minutiae files contain 
insufficient data to re-create fin- 
gerprint images.) Experts then 
evaluate the decompressed 
images to determine the likeli- 
hood of their matching the crime- 
scene print. 

The dc-capacitive fingerprint 
sensors from SGS-Thomson and 
Veridicom consist of rectangular 
arrtiys of capacitors on a silicon 
chip. One plate of the capacitor ii your finyer; the other plate is a 
tiny area of metallization (a pixel) on the chip's surface. You place 
your finger against the surface of the chip (actually against an insu- 
lated coating on the chip's surface). The ridges of your fingerprint 
are dose to the nearby pixels and have high capacitance to them. 
The valleys are more distant from the pi^^ets Reartst them m4 
therefore have lower capacitance. 

The sensor then draws a fixed charge from each pixel in tupn 
(that is, it scans the pixels). A high voltage appears on pixels to 
which your finger has low capacitance, and a low voltage appears 
on pixels to which your finger has a high capacitance. 

SCS-Thomson's TouchChip uses an active-sensing technology 
in which each pixel comprises two liny side-by-side plates (Fig- 
ure B). Each plate is one terminal of a capacitor; your finger is the 
other terminal. The plate that does the sensing connects to the 
input of an inverter. The other plate connects to the inverter's out- 
put. The inverter act;; as a buffer between its pixel and the chip's 
ADC. The two-capacitor architecture maintains a roughly con- 
stant average voltage on all of the pixels' plate pairs, thus minf- 
misirtg ihe elfeets of parasitic capaqitance. 

Trailing-edge IC technology 

One of the beauties of the dc-capacitive-sensing technology is 
that IC manuffic.lurf?rs can produce the chips with otherwise obso- 
lete wafer-fabrication processes. No amount of improvement of 
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balances stored in such cards. For point- 
of-sale terminals, biometric techniques 
could replace a clerk's verification of a 
customer's signature. 

Biometric techniques could also 
potentially replace driver's licenses or 



passports for authenticating the identi- 
ty of airline passengers. Similar tech- 
niques could replace or supplement 
passports and visas for establishing the 
identity of people seeking to cross 
natfonal borders at customs ar^ Immi- 



gration checkpoints. 

In hospitals, biometric techniques 
could replace ID bracelets to establish 
patients' identities — for example, 
before blood administration. Biomet- 
rics could help cofifirra the identity of 



Figure B 




IC process geometries 
can reduce the size of a 
human finger, and the 
chips have to be as large 
as a finger tip. The chips 
thus measure about 
12x20 mm, which is 
large as \Cs go. Birt the 
feature size is a generous 
•0.7 jxm, so the large die 
size does not translate 
into unreasonable cost. 
Also, the defect-density 
requirements are mod- 
est. A chip can have a 
complete row of defec- 
tive pixels ar>d still work 
well. 

Veridicom's approach 
is similar to SGS-Thom- 
son's except that Veridi- 
com does not use an 
inverter per pixel. The 
absence of inverters 
makes Veridicom's chip 
inherently simpler than 
SCS-Thomson's. SGS- 
Thomson says, however, 
that the two devices are 
roughly equal in com- 
plexity. Also, SGS-Thom- 
%op credits the use of an 
tfjvater-per-pixel approach with the relatively easy job the com- 
pany had in achieving satisfactory immunity to parasitic capaci- 
tance. 

Besides dc-capacitive sensing, an IC can obtain an image of a 
finger tip's ridges and valleys in several ways. Harris' FingerLoc IC 
is also a capacitive sensor, but instead of measuring capacitance 
with dc, it uses an ac electric field. And, CCD optical image S/en- 
sors are at the heart of most optica! fingerprint sensors. 

Thomson-CSF's Flr>gerChfp uses a 2-D array of semiconductor 
temperature sensors to capture fingerprint images. Your finger's 
ridges are close to the chip and thus conduct heat avvay more 
effectively than do the valleys, which are insulated by a layer of air. 

The original implementation of FingerChip was a linear array of 
sensors. To make the device work properly, you had to draw your 
finger across the IC at a rather closely controlled rate. Many sub- 
jects encountered difficulty with this aspect of the device's opera- 
tion. The current version uses a 2-D array. According to Thomson- 
CSF, although you must still draw your finger across the IC, the 
acceptable range of speeds is so wide that subjects no longer 
expcMence dtffciJ% wjirig ttis dJivfe*. {48hg©v», l^mtse k tftkas 



Using a cell (pixel) that comprises two capacitors and driving the sec 
ond capacitor with an Inverter reduce tiie parasKlc-c^acitance sus 
ceptibillty of SCS-Thomson's TouchChlp flngerprint-sensor IC. 



advantage of mechanical 
scanning (drawing the 
finger across the chip), 
FingerChip need not be as 
large as a finger tip. 

Who? Vision Systems 
asserts that its Tactile- 
Sense technology is less 
expensive than but supe- 
rior to ttte IC manufactyr- 
ers'. The technology may 
be a breakthrough, but 
the company intentional- 
ly doesn't reveal many 
details. According to 
Who? (no, this isn't an 
Abbott and Costello rou- 
tine), TactileSense uses an 
electro-optical sensor chip 
about which the compa- 
ny provides few details. 
The chip's area is only 1 % 
that of the direct-capaci- 
tive-sensing chips. 

What enables the use of 
the small chip is an inex- 
pensive, flexible polymer 
material. According to the 
company, the material 
focuses the finger's image 
onto the chip's small area. 
A spokesman asserts that if 
you press your finger against the polymer, you can see a glowing 
image of your finger on the polymer surface that normally con- 
tacts the IC. The company says that you can scratch the plastic 
and expose it to moisture, dirt, sodium, and static electricity with- 
out affecting the sensor's operation. 

Who? asserts that a complete sensing unit fits in a volume of less 
than 1 in.' and costs $25 to $50 in quantity. SGS-Thomson gives 
a price of less than $50 for a complete module, including the 
TouchChip and a PC interface. Moreover, the company's l-in.-sq 
sensor module (see the photo on pg 46) accommodates an ASIC 
that can perform such functions as encryption or minutiae extrac- 
tion. SGS-Thomson asserts that when its competitors talk about 
similarly priced modules, they are talking about units that perform 
fewer functions — something the competitors deny. 

One of Who? Vision's assertions is that because you never 
directly touch the chip in its device, the device is inherently more 
rugged than direct-capacitive-sensing devices. The IC companies 
disagree, however. SGS-Thomson, for example, says it has devel- 
oped coatings that you can scratch with a diamond scribe with- 
out darr^ging the coated chip. 



(^a glance 

• Using your physical attributes to 
verify or authenticate your identity 
has many advantages over the tra- 
ditional approach — passwords and 
PINs. 

• No biometric approach is 100%- 
accurate. 

• Biometrics is a hot technology; the 
most enthusiastic advocates see a 
market for one or more bicraettic 
sensors on every PC. 



• Biometric technology must over- 
come many problems before It can 
achieve ubiquitous deployment. 

• Despite enthusiasm in the PC indus- 
try, using biometrics in embedded 
systems makes more sense than do 
many proposed desktop-PC appli- 
cations. 

• Of the embedded applications, cel- 
lular phones appear to have enor- 
mous poten^^l^r biometrics. 



people seeking pubtic assistance, 
Medicare, and other government and 
insurance benefits. In these apphca- 
tions, biometrics would replace or sup- 
plement a variety of systems, of which 
photo IDs are probably the most popu- 
lar. Biometrics could also authenticate 
e-mail and other documents transmit- 
ted via computer networks. In most 
cases, these messages are not currently 
authenticated. 

Many of these applications are in 
embedded systems rather than in PCs. 
Except for two types of embedded ap- 
plications — automobiles and cell 
phonf€*— the unit volumes are weH- 
below a million units per year. Despite 
the modest volumes, however, nearly 
all of the applications are cost-sensitive. 

Some of the biometric technologies 
are face recognition using optical or 
thermal imaging; fingerprint imaging 
using optical, thermal and ac- and dc- 
capacitive sensing (see sidebar "Finger- 
print sensing — pointing the way to low- 
c(?St biometrics"); hand-geometry 
measurement and palm scanning; iris 
and retina scanning; signature recogni- 
tiemj aid ■roicepcin-ts. 

Vaa-ying cost 

The cost of the various approaches 
varies widely and is changing rapidly. A 
year or two ago, fingerprint sensors cost 
more than $1000. Now, several compa- 
niw are talking abcrut units thatcost less 
than $50. Face recognition cost about 
$1500 a short while ago. Now, on a PC 
that incorporates a desktop videocam- 
era, the hardware is, in effect, free. The 
only cost is that of the softwaie— sever- 
al hundred dollars. 

Voiceprint and signature-recognition 
equipment still costs in the neighbor- 
hood of $1000, and equipment that 
measures hand geometry corts about 
twice as much. Iris- and retina-scanning 
systems cost more than $5000. Ther- 
mal-imaging-system prices begin at 
about $50,000, but that cost is for an 
entire enterprise. Prorated among a 
number of imaging stations, the costs 
are probably comparable with those of 
iris scanners. 

Voiceprints and signatures are called 
"behavioral triomrtrics" because a vari- 
ety of not-strictly-physical factors can 
affect them. These factors include 



mood, stress, fatigue, and how utuch 
time has passed since you awoke. Voice- 
prints are time series of spectral-power- 
density plots, which show how the 
eriergy in youx voice at different fre- 
quencies varies versus time as you 
vocalize a word or phrase, Voiceprint 
experts insist that enough characteris- 
tics of your voiceprint remain constant 
under all circumstances tbat a voice- 
pttut mn rdteWy verify yam idaitity. 

Biometrics at a distance 

Using your voice to verify your iden- 
tity has one characteristic that raost 
other biometric technologies cannot 
match. With existing voice-transinis- 
sion techpBfifkjgi; mias Eecopiliio-n 




Fingerprint sensing can add security to 
computer networks and tlie Internet. 
Digital Persona's $99 USB-interfaced 
U.are.U optical fingerprint sensor is 
available with software that establishes 
a dataiiase of the fingerprints of legiti- 
mate networii users. The software 
allows access only to enrolled users. 



work over long distances via ordinary 
telephones. A well-conceived and prop- 
erly implemented voice-based security 
system could provide major enhance- 
ments td the safety of financial transac- 
tions conducted over the telephone. 

Although friends and associates may 
use your voice to identify you, and your 
bank may someday do likewise, no per- 
sonal attrtbute is as common for identi- 
fication as your signature. Unfortunate- 
ly, a signature is one of the least reliable 
methods of identification. Forgers have 
myriad ways of producing a signature 
that looks like yours. Biometrics can foil 
the forgers, however. 

When a biometric sensor captures 
your signature, it captures more than 
just the appearance of your writing. 
Someorte who forges jma signature 
does not necessarily make the various 
pen strokes the same way you do. A bio- 
metric signature-capture unit measures 
such variables as the speed and direction 
of your hand movements as you fDrm 
your signature. Some units also measure 
the force with which you press the pen 
against the paper and the angle at which 
you hold the pen. The units often con- 
sist of a pad that cootains » resistive grtd 
or a 2-D array of ultrasonic sensors. One 
unit, LCI Computer Group's Smartpen, 
includes a group of sensors and a small 
radio transmitter. This unit requires no 
special writing pad. 

Such signature-capture units don't, 
however, perform a function akin to 
that of voiceprint equipment attached 
to a telephone. Signature-capture units 
can^t validate a sipiatuje already affixed 
to a dacamiail-fea* yaijeoeiv^ft by mail 
or fax. 
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If PCs are to be the first mass-market 
products to incorporate biometrics, a 
good place to start seems to be witfi 
notebook PCs. Compared with desktop 
units, notebooks are more subject to 
theft and tampering and have shorter 
useful lives, Today^ most information- 
technology (IT) managers would proba- 
bly pay a modest premium for an easy- 
to-use alternative to password pro- 
tection of such machines. But many of 
these managers exf^ct to wait several 
years before they consider widespread 
deployment of biometrics on desktop 
PCs and workstations. 

As with any ascendant computer 
technology, standards and software 
must precede ubiquitous deployment. 
Moreover, the largest purchasers of the 
new technology-^IT managers in medi- 
um and large companies — must con- 
vince themselves of a reasonable pay 
back. Although some devices, such as 
IC fingerprint sensors, may eventually 
cost less than $5 in quantity, the total 
cost of installing biometric sensing is 
several times the sensing unit's cost. 
Moreover, much of the initial crop of 
sensing units uses USB interfaces. As a 
result, biometric sensing on PCs may 
become cost-effective only 
when rr managers replace the 
installed base of computers 
with USB-compliant PCs. 

Because of the structure of 
the computer industry, making 
biometTic security a feature of 
embedded systems — cellular 
phones, for example — may be 
simpler than adding similar 
features to PCs. Unlike the PC, 
the cell phone is a fixed-pur- 
pose device. To successfully 
incorporate biometrics, cell- 
phone developers need not 
gather support from nearly as 
many groups ais PC-application 
developers must. 

Before they can begin wide- 
spread product deployment, 
developers of PC biometric 
products imist wait for repre- 
sentatives of dozens of compa- 
nies to work out the details of a 
generalized biometric applica- 
tion-programming interface 
(API). This work requires the 
coqperatkm of BIOS venders. 



the operating-system vendor, add-on 
security^ardware vendors, and devel- 
opers of applications that must recog- 
nize the security features. Currently in 
the computer industry, at least four 
efforts are under way to develop bio- 
metric APIs. 

Made for just embedded systems 

The situation in embedded applica- 
tions differs somewhat. In many cases, 
embedded applications cry out for ways 
to improve security without encumber- 
ing users with complex procedures. For 
example, biometrics sometimes permits 
eliminating cards^ such as those that 
restrict workplace access to small 
groups of employees. Moreover, con- 
trolling access does not involve remem- 
bering PINs or passwords. 

Cellular phones are one type of 
embedded system whose ease-of-use 
requirements, large production vol- 
umes, and vulnerability to theft make 
them strong contenders for biometrics. 
Cell phones need improved security to 
prevent their unauthorized use. Over 
the next five years, millions of North 
American cellular subscribers will 
replace their phones as they upgrade to 




The FingerChip IC fingerprint sensor from Tliomson-CSF 
uses thermal sensing. Unlike other IC fingerprint sensors, 
the device need not be as large as your finger tip, because 
you draw your finger across the 2-D sensor array. Accord- 
ing, to the cpmpany, the sjm4 virhi^ yoM move your 
Ingfr U nm (srtticiiM^'R was m mmt m^im tkmt 
^<Ska 1-D sensar aivay. 



digital cellular technology. This mass 
upgrade appears to offer biometrics 
advocates a golden opportunity for 
widespread deployment of their tech- 
nology in compact, moderately priced 
products. Despite this opportunity, 
however, many biometrics companies 
seem determined not to be distracted 
from a PC focus. 

Adding biometric security to a cell 
phone is hardly trivial. However, sur- 
mounting the chaltenges — maintain- 
ing small size and weight and low 
power consumption — should produce a 
substantial payoff. The miniaturization 
that cell phones require should help 
make biometric technology moie wide- 
ly acceptable. 

Deciding whicli is best 

Just which biometric technologies 
are best for particular applications has 
become the subject of heated debates. 
Fueling the fervor is the lack of objec- 
tive information comparing the accura- 
cy of the various technologies. Factors 
that add interest to the comparison 
include the ease of use, the likelihood of 
public acceptance, and the ease with 
wbich sonieone intent on deceptton 
can fool a technique. 

The two technologies that 
probably offer the highest 
accuracy are iris scans and 
facial thermal imaging. Until 
recently, iris scans were incon- 
venient; they required the sub- 
ject to hold still and look direct- 
ly at the camera. Most people 
instinctively averted their gaze. 
Improved technology uses 
multiple cameras and high- 
speed real-time video process- 
ing to overcome these prob- 
lems (Reference 1). Both 
thermal imaging and iris scan- 
ning are among the most 
expensive biometric-authenti- 
cation technologies. An iris- 
scanning station costs about 
$5000. Costs for thermal imag- 
ing are harder to pin down but 
appear to be comparable. 

The drastic drop in the price 
of desktop videocameras has 
led to widespread deployment 
of the devices, some of which 
axe now part of video monitors 
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(Reference 2). This widespread 
deployment has prompted companies 
such as Miros, Visionjcs, and Viisage to 
develop authentication systems based 
on monitoring the images these cam- 
eras produce. The systems claim to 
detect Impostors, and the companies 
have videos that show the systems 
doing just that. Despite these demoS; 
potential users continue to express 
some skepticism about facial-imaging 
accuracy. 

To allay such doubts, some compa- 
nies, such as Qvoice, combine multiple 
technoiogies. Every PC that comes with 
a video camera also contaims a sound 
card, and nearly every sound card has a 
microphone input. The audio input is 
thus, in effect, a no-cost feature that 
biometrics-software companies can 
harness to offer improved security. 

Of course, an impostor, disguised as 
you, might connect a tape recorder to 
the sound card's microphone input and 
play back a recording of your voice. The 
voice-tecognition software probably 
couldhll dfertnguish the recording from 
the real thing, fiowever, the software 
could work around this deficiency by 
requiring the subject to repeat a phrase 
the computer randomly selects from a 
Isrgf repertoire. In afl likelihood, an 
impostor would be unable to get a 
recorder to play back the correct phrase 

LtkeliliiHid Is the key 

Tlie issue of likelihood is central to 
discussions of biometrics. No system 
can be lOO'Ki-accurate. The goal is to 
make fooling the system so complex 
and expensive that would-be attackers 
decide that the potential rewards don't 
justif}' the required effort. Still, the idea 
of combining multiple biometric tech- 
milogies into one system is at the heart 
of another debate among biometrics 
advocates. Some — particularly those 
who advocate the use of fingerprint 
sensing — assert that one technology is 
enough. The fingerprint advocates 
point oirt that most people have 10 fin- 
gerprints. If one print can verify your 
identity with a 1% error, using two 
prints should result in a 0.01% error. 

Still, none of the systems is perfect. 
Fingerprint senscrrs hme had a reputa- 
tion for twlnf subject to wrois ftam 




latent prints — those left by the 
previous subject. Optical fingerprint 
sensors are probably more subject to 
this problem than are some newer 
types, such as capacitive and thermal 
devices. Fingerprint sensing also 
encounters difficulties in areas such as 
construction sites and machine shops, 
where many subjects' fingers are dirty, 
cut, or deeply callused. Such fingers do 
not produce good images and system 
accuracy suffers. Alternatives that over- 
come these problems (but introduce 
new issues) Include scanning of the 
palm of the hand or measuring the 
geometry of the entire hand. 

Despite its problems, biometric secu- 
rity offers several advantages over cur- 
rent approaches. People can steal or 
copy keys. Badges used to control 
admission to secure areas are of no value 
unless they require you to enter a PIN. 
You can too easily forget your password 
or P!N, if you write it down, some- 
one else may find it and misuse it. 

Sales clerks rarely seem to check 
whether your signature matches the sig- 
nature on the back of your credit card. 
The airport ticket agent's check of the 
photo on your driver's license or pass- 
port is the only type of identity check 
that appears to be more than perfimc- 
tory. Yet, even this check is far from 
foolproof. Moreover, men who grow cr 
shave off mustaches and beards and 
women who change their hair style or 
hair color sometimes have to get new 
photo IDs — a real nuisance. 

Biometrics — not always better 

Despite the problems with conven- 
tional approaches, biometric approach- 
es are not always better. In many cases, 
th€ people who pfopose ustjfif biomet- 
riG do not appear to havt tlfOught 



By placing a fingerprint sensor in your 
PC's keyboard, Who? Vision Systems 
does not require you to have a PC that 
supports USB or to share the printer 
port with other peripherals. The coiif 
pany says that adding the fingerprint 
sensor costs keyboard manufacturers 
only $25 to $S9 per unit. 



through the host of details that can 
make or break an application. 

For example, although a fingerprint 
reader might work well at your local 
supermarket or discount department 
store, how would it work in a restau- 
rant? Would you have to go to the 
cashier instead of paying the server? 
Although you might welcome never 
having your credit card leave your sigfit, 
this ptooedure doesn't seem to fit well 
with the ambimice of even moderately 
priced restaurants. Maybe the server 
would bring a special cellular 
phone/modem/card reader and finger- 
print reader to your table. If so, how 
many customers would object to being 
fingerprinted to pay a re.staurant tab? If 
fingerprint recognition turns out to be 
unacceptable in restaurants, would 
other types of retail businesses accept 
the technology? 

Widespread use of biometrics for 
identification would noticeably affect 
most people's lives. Unless people per- 
ceive the changes as unintrusive m 
Innocuous or as a great improvement 
over the "old way," a public outcry is 
likely. Should public opposition 
emerge, all sorts of scary stories and 
urban legends will proliferate. Already, 
you may hmt heai^ the questian, 
"Wauid ym want ymr fing'^fyits 
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floating all over the Internet?" This 
question suggests that such files would 
be unprotected. In fact, fingerprints 
will be automatically encrypted, usual- 
ly by a processor within the sensing 
unit Qi associated PC. Encryption lim- 
its access to the intended recipient (Ref- 
erence 3). 

A vocal group, fearing loss of privacy 
and government control of their lives, 
is already up in arms over the expand- 
ing use of fingerprints and other bio- 
metric technology. One of the Web sites 
at which you can read about the group's 
concerns and activities is www. 
netwof kusa.Qrg/fingerpr inLshtml . 

Biometrics and smart cards 

A technology that may well turn out 
to be closely hnked to biometrics is 
smart-card technology (Reference 4). 
One of the ideas behind smart cards is 
to decrease the dependence on central- 
ized databases for storing personal data. 
Magnetic-stripe cards, such as those 
Currently popular in the United States, 
are not smart. Such cards may provide 
access to important personal data, but 
the data resides on a remote computer. 
You or someone else — a health-care 
provider, for example — can use the 
magnetic-stripe card to access the 
remote database. 

Smart cards would remove some of 
the data that pertains to you from the 
centralized database. This data would 
reside on your card. Without protec- 
tion, however, the data would be ripe 
for misuse. The protection would come 
in the form of encryption — possibly 
based on biometrics. For example, soft- 
ware that generates keys for a dual-key 
encryption system might use data 
derived from a biometric sensor, such as 
a fingerprtat sensor, to geflgiate one of 
the keys. 

Legal issues will almost surely delay 
and complicate the introduction of bio- 
metrics into your daily routine. If soci- 
ety is to realize the technology's full 
potential, changes are necessary in 
many laws. For example, laws that 
require your signature or photograph 
on certain documents will have to allow 
(though probably not require) the sub- 
stitution of biometric identity-verifica- 
tion techniques. 



One way in which biometrics might 
fail is by setting people's expectations 
too high. No biometric technique is 
foolproof. People need to be clear on 
that issue. Getting objective compar- 
isons of the false acceptance rate (FAR) 
and fafse refection rate (FRR) of various 
technologies is just about impossible. 
The FAR is the percentage of time that a 
system grants access to someone who is 
misrepresenting himself. The FRR is the 
percentage of time that a system denies 
access to a legitimate applicant. In gen- 
eral, in any system, the more stringent 
you make the acceptance criteria, the 
lower the FAR becomes arid the higher 
the FRR becomes. 

In most biometric-security applica- 
tions, you don't ask the system to deter- 
mine the identity of the person who 
presents himself to the system. That is, 
you don't say to the system, "Of the 
millions of sets of fingerprints you have 
on file, which set contains a print that 
matches this print?" This problem is 
"one-to-many matching." Usually, you 
supply your identity to the system, 
often by presenting a machine-readable 
ID card, and ask the system to confirm 
that you are who you say you are. This 
problem is "one-to-one matching." 
Today's PCs can conduct a one-to-one 
match in, at most, a few seconds. 

One-to-one matching differs signifi- 
cantly from one-to-many matching. In 
a system that stores a million sets of 
prints, a one-to-many match requires 
comparing the presented fingerprint 
with 10 million prints (1 million sets 
times 10 prints/set). One-to-many 
matching is typical of fingerprint 
searches that law-enforcement authori- 
ties conduct with the aid of automatic 
fingerprint-identification systems 
(AFISs). Some proposed Ms-sCan sys- 
tems would also perform one-to-many 
matching, using only an iris scan to 
identify an individual. 

AFISs are expensive (typically more 
than $1 million) systems that incorpo- 
rate high-speed parallel processors. The 
systems do not make the final judg- 
ment on which stored fingerprints 
match the presented print. Rather, the 
systems determine which sets of stored 
prints have a high likelihood of match- 
ing the presented print. Human experts 



then further evaluate the AFIS selec- 
tions to see which are most lltely to 
match the presented print. 

Biometric identity verification is 
almost always a case of one-to-one or 
one-to-a-few matching. At an ATM, for 
example, you would still have to pre- 
sent your card. But, instead of keying in 
your password, you would press your 
finger against a fingerprint sensor, 
speak a predetermined phrase into a 
microphone, or look at a videocamera. 

An example of one-to-a-few match- 
ing is an entry-control system for the 
restricted-access work area of a small 
work group (of, say, 20 people or fewer), 
fn this example, the workers might not 
need access cards; they might need to 
present only a fingerprint to a sensor at 
the point of entry. A modest computer 
could determine within a few seconds 
whether the presented print matched 
one of the plWS In the 20 lets in the 
database. HI 
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Tnm to page 63 for a list of maQu- 
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